Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple SafariInput Validation, Integer Overflow

Risk 86
Severity
9.8
Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

App Store. A permissions issue was addressed with additional restrictions.

1 / 31
Source: Apple
First published (updated )
CVE-2025-43526

Apple iOSInput Validation, SQL Injection, Buffer Overflow, Race Condition

Risk 91
Severity
9.8
Input Validation, SQL Injection, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AirPort. A permissions issue was addressed with additional restrictions.

1 / 96
Source: Apple
First published (updated )
CVE-2025-43343

Apple iOSInput Validation, SQL Injection, Buffer Overflow, Race Condition

Risk 91
Severity
9.8
Input Validation, SQL Injection, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 95
Source: MITRE
First published (updated )
CVE-2025-43342

debian/webkit2gtkBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition

Risk 91
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 155
Source: Apple
First published (updated )
CVE-2025-24264

Apple SafariInput Validation, Use After Free, Buffer Overflow, Null Pointer Dereference, Integer Overflow

Risk 86
Severity
9.8
Input Validation, Use After Free, Buffer Overflow, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 106
Source: Apple
First published (updated )
CVE-2025-24167
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple visionOSUse After Free, Race Condition, Input Validation, Buffer Overflow, Null Pointer Dereference, Integer Overflow

Risk 91
Severity
9.8
Use After Free, Race Condition, Input Validation, Buffer Overflow, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 111
Source: Apple
First published (updated )
CVE-2024-54534

Apple SafariRace Condition, Use After Free, Input Validation

Risk 66
Severity
9.1
Race Condition, Use After Free, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 52
Source: Apple
First published (updated )
CVE-2024-54542

debian/webkit2gtkUse After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 91
Severity
9.8
Use After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 64
Source: Debian
First published (updated )
CVE-2024-40782

Apple WatchOSInput Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow

Risk 61
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Accounts. The issue was addressed with improved checks.

1 / 66
Source: Apple
First published (updated )
CVE-2024-44206
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/chromiumUse after free in ANGLE

Risk 60
Severity
9.6
EPSS
0.04%
Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Accounts. The issue was addressed with improved checks.

1 / 66
Source: Apple
First published (updated )
CVE-2024-4558

ubuntu/webkit2gtkApple Multiple Products WebKit Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
Buffer Overflow, Input Validation, Race Condition, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Airport. A permissions issue was addressed with improved redaction of sensitive information.

1 / 100
Source: Apple
First published (updated )
CVE-2023-41993

debian/webkit2gtkUse After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 80
Severity
9.3
Use After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management.

1 / 48
Source: Red Hat
First published (updated )
CVE-2021-30795

redhat/webkitgtkLast updated 25 August 2025

Risk 83
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2019-8535

Apple tvOSLast updated 25 August 2025

Risk 82
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-8518
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apple tvOSLast updated 25 August 2025

Risk 82
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-8523

redhat/webkitgtkLast updated 25 August 2025

Risk 83
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2019-8544

redhat/webkitgtkLast updated 25 August 2025

Risk 83
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2019-8536

Apple iCloudBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

First published (updated )
CVE-2017-7042

Apple iCloudBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

First published (updated )
CVE-2017-7041
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apple SafariBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

First published (updated )
CVE-2017-7022

Apple SafariBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

First published (updated )
CVE-2017-7025

Apple SafariBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

First published (updated )
CVE-2017-7024

Apple SafariBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

First published (updated )
CVE-2017-7023

Apple SafariUnspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary code with root privileges via unknown vectors, as demonstrated by Google during a Pwn4Fun competition at CanSecWest 2014.

First published (updated )
CVE-2014-1300
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Google ChromeUse After Free

Risk 87
Severity
10
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

First published (updated )
CVE-2010-3116

Apple SafariUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving fonts.

First published (updated )
CVE-2010-1771

Apple SafariCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."

First published (updated )
CVE-2010-1770

Apple SafariBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses out-of-bounds memory during processing of HTML tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.

First published (updated )
CVE-2010-1774

Apple SafariUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML document subtrees.

First published (updated )
CVE-2010-1761
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203